VMware AppDefense

The IBM QRadar DSM for VMware AppDefense collects events from a VMware AppDefense system.

To integrate VMware AppDefense with QRadar, complete the following steps:
  1. If automatic updates are not enabled, RPMs are available for download from the IBM support website (http://www.ibm.com/support). Download and install the most recent version of the following RPMs on your QRadar Console:
    • Protocol-Common RPM
    • VMWare AppDefense API Protocol RPM
    • DSMCommon RPM
    • VMware AppDefense DSM RPM
  2. Configure your VMware AppDefense device to send events to QRadar.
  3. Add a VMware AppDefense log source that uses the VMWare AppDefense API protocol on the QRadar Console.